{"api_version":"1","generated_at":"2026-07-23T13:22:07+00:00","cve":"CVE-2023-32428","urls":{"html":"https://cve.report/CVE-2023-32428","api":"https://cve.report/api/cve/CVE-2023-32428.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2023-32428","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2023-32428"},"summary":{"title":"CVE-2023-32428","description":"This issue was addressed with improved file handling. This issue is fixed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, watchOS 9.5. An app may be able to gain root privileges.","state":"PUBLIC","assigner":"product-security@apple.com","published_at":"2023-09-06 02:15:00","updated_at":"2023-09-09 03:44:00"},"problem_types":["NVD-CWE-noinfo"],"metrics":[],"references":[{"url":"https://support.apple.com/en-us/HT213758","name":"https://support.apple.com/en-us/HT213758","refsource":"MISC","tags":[],"title":"About the security content of macOS Ventura 13.4 - Apple Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://support.apple.com/en-us/HT213757","name":"https://support.apple.com/en-us/HT213757","refsource":"MISC","tags":[],"title":"About the security content of iOS 16.5 and iPadOS 16.5 - Apple Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://support.apple.com/kb/HT213758","name":"https://support.apple.com/kb/HT213758","refsource":"MISC","tags":[],"title":"About the security content of macOS Ventura 13.4 - Apple Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://support.apple.com/kb/HT213764","name":"https://support.apple.com/kb/HT213764","refsource":"MISC","tags":[],"title":"About the security content of watchOS 9.5 - Apple Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://support.apple.com/en-us/HT213761","name":"https://support.apple.com/en-us/HT213761","refsource":"MISC","tags":[],"title":"About the security content of tvOS 16.5 - Apple Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://support.apple.com/en-us/HT213764","name":"https://support.apple.com/en-us/HT213764","refsource":"MISC","tags":[],"title":"About the security content of watchOS 9.5 - Apple Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://support.apple.com/kb/HT213757","name":"https://support.apple.com/kb/HT213757","refsource":"MISC","tags":[],"title":"About the security content of iOS 16.5 and iPadOS 16.5 - Apple Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://support.apple.com/kb/HT213761","name":"https://support.apple.com/kb/HT213761","refsource":"MISC","tags":[],"title":"About the security content of tvOS 16.5 - Apple Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-32428","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32428","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2023","cve_id":"32428","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"apple","cpe5":"ipad_os","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2023","cve_id":"32428","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"apple","cpe5":"iphone_os","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2023","cve_id":"32428","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"apple","cpe5":"macos","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2023","cve_id":"32428","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"apple","cpe5":"tvos","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2023","cve_id":"32428","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"apple","cpe5":"watchos","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"data_version":"4.0","data_type":"CVE","data_format":"MITRE","CVE_data_meta":{"ID":"CVE-2023-32428","ASSIGNER":"product-security@apple.com","STATE":"PUBLIC"},"description":{"description_data":[{"lang":"eng","value":"This issue was addressed with improved file handling. This issue is fixed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, watchOS 9.5. An app may be able to gain root privileges."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"An app may be able to gain root privileges"}]}]},"affects":{"vendor":{"vendor_data":[{"vendor_name":"Apple","product":{"product_data":[{"product_name":"macOS","version":{"version_data":[{"version_affected":"<","version_name":"unspecified","version_value":"13.4"}]}},{"product_name":"watchOS","version":{"version_data":[{"version_affected":"<","version_name":"unspecified","version_value":"9.5"}]}},{"product_name":"iOS and iPadOS","version":{"version_data":[{"version_affected":"<","version_name":"unspecified","version_value":"16.5"}]}},{"product_name":"tvOS","version":{"version_data":[{"version_affected":"<","version_name":"unspecified","version_value":"16.5"}]}}]}}]}},"references":{"reference_data":[{"url":"https://support.apple.com/en-us/HT213758","refsource":"MISC","name":"https://support.apple.com/en-us/HT213758"},{"url":"https://support.apple.com/en-us/HT213764","refsource":"MISC","name":"https://support.apple.com/en-us/HT213764"},{"url":"https://support.apple.com/en-us/HT213757","refsource":"MISC","name":"https://support.apple.com/en-us/HT213757"},{"url":"https://support.apple.com/en-us/HT213761","refsource":"MISC","name":"https://support.apple.com/en-us/HT213761"},{"url":"https://support.apple.com/kb/HT213757","refsource":"MISC","name":"https://support.apple.com/kb/HT213757"},{"url":"https://support.apple.com/kb/HT213761","refsource":"MISC","name":"https://support.apple.com/kb/HT213761"},{"url":"https://support.apple.com/kb/HT213764","refsource":"MISC","name":"https://support.apple.com/kb/HT213764"},{"url":"https://support.apple.com/kb/HT213758","refsource":"MISC","name":"https://support.apple.com/kb/HT213758"}]}},"nvd":{"publishedDate":"2023-09-06 02:15:00","lastModifiedDate":"2023-09-09 03:44:00","problem_types":["NVD-CWE-noinfo"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0","versionEndExcluding":"13.4","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*","versionEndExcluding":"9.5","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","versionEndExcluding":"16.5","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndExcluding":"16.5","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:apple:ipad_os:*:*:*:*:*:*:*:*","versionEndExcluding":"16.5","cpe_name":[]}]}]}},"legacy_mitre":{"record":null,"notes":[]}}}